AnycastDNS
reliable and optimal performance
AnycastDNS
Fast, Stable and Secure
The Anycast name servers are connected to the Internet under the same IP addresses at different, globally distributed locations. This ensures that every DNS query from the Internet is routed to the topologically closest nameserver instance, resulting in shorter response times and increased reliability.
Anycast technology has proven to be an effective tool against (D)DoS attacks and already meets the highest future IT security standards for DNS infrastructures through integrated DNSSEC capability.
State of the Art Technology
PartnerGate relies on RcodeZero, the Anycast network of nic.at’s subsidiary IPCom. The highly available DNS infrastructure of the Austrian registry offers a useful addition to the unicast DNS servers operated by PartnerGate itself, whose 5 instances at several locations in Germany are connected to the Internet via different carriers.
The Anycast network currently consists of over 30 worldwide distributed locations in two separate clouds (with different AS and different providers). The locations of the anycast nodes will be successively expanded in the coming months. They are located in close proximity to the local Internet Exchange and thus guarantee the lowest possible latency.
The number of sites is not the only criterion for a high-performance network. The technical architecture and hardware play an even more important role. Each anycast node has two separate Internet connections and two independent routers. The servers, hard disks and power supply are designed redundantly and thus ensure maximum reliability.
The capacity of each Anycast site is 500,000 DNS queries per second – for a total of 5 million queries per second across the Anycast network. The technical architecture of the network meets all DNS relevant standards, such as RFC (request for comments) 4786 of the IETF (Internet Engineering Task Force).
The AnycastDNS nodes provide DNS services over both IPv4 and IPv6 and support DNSSEC. DNSSEC uses a digital signature to ensure that the delivered data of the requested name server is correct and identical to the authoritative name server for the zone. Many domain registries already have DNSSEC in operation.
The name server setup is fully integrated into the PartnerGate ordering process, ensuring an uninterrupted order flow for the web front-end user with immediate DNS provisioning.
Customer-specific alias host names (e.g. ns1. companyname.de, ns2.companyname.de, etc.) can be set up for the partner and its resellers if required.